full-disclosure - DCOM Worm?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20030812002851.11242.qmail@web11306.mail.yahoo.com>
From: orniter at yahoo.com (Carl Sager)
Subject: DCOM Worm?

It appears the worm works on XP as well.  I work for a
nation wide retail chain that also provides technical
services and it looks like our intranet just got hit
up.  I'm on XP pro and I've got msblast on my drive
now and just saw a whole line of XP terminals reboot
(it was pretty cool, actually)...so it must use
different offsets - randomly?  If it was using the
wrong offsets then it would crash the service and
cause the shutdown errors in XP.  Seems like a waste
of time to go to all the trouble of releasing this
just to ddos windowsupdate.com though, anyone noticed
more interesting effects?

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com